{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "built docker @projectatomic/fedora-1.10.3 commit 8ecd47f\n", "type": "security", "status": "obsolete", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2016-05-20 10:06:27", "date_modified": "2016-05-20 16:02:35", "date_approved": null, "date_testing": "2016-05-21 00:16:51", "date_stable": null, "alias": "FEDORA-2016-5f73992af7", "test_gating_status": null, "from_tag": null, "date_pushed": "2016-05-21 00:16:51", "meets_testing_requirements": false, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2016-5f73992af7", "title": "docker-1.10.3-10.git8ecd47f.fc24", "version_hash": "9627e28132f0c5057f2521174517c7c8983a4988", "release": {"name": "F24", "long_name": "Fedora 24", "version": "24", "id_prefix": "FEDORA", "branch": "f24", "dist_tag": "f24", "stable_tag": "f24-updates", "testing_tag": "f24-updates-testing", "candidate_tag": "f24-updates-candidate", "pending_signing_tag": "f24-signing-pending", "pending_testing_tag": "f24-updates-testing-pending", "pending_stable_tag": "f24-updates-pending", "override_tag": "f24-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "runcom", "email": "amurdaca@redhat.com", "id": 2468, "avatar": "https://seccdn.libravatar.org/avatar/3d724e4084e6202a0ecec93274be9a35984f6aa4df6df50a2aafb348da4b948e?s=24&d=retro", "openid": "runcom.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "iot"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by runcom. ", "timestamp": "2016-05-20 10:06:27", "update_id": 58755, "user_id": 91, "id": 435501, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "runcom edited this update.", "timestamp": "2016-05-20 16:02:35", "update_id": 58755, "user_id": 91, "id": 435560, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2016-05-21 01:35:59", "update_id": 58755, "user_id": 91, "id": 435935, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 3 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2016-05-24 06:00:44", "update_id": 58755, "user_id": 91, "id": 437372, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "no problems spotted", "timestamp": "2016-05-25 08:22:42", "update_id": 58755, "user_id": 122, "id": 437831, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "jpopelka", "email": "jpopelka@redhat.com", "id": 122, "avatar": "https://seccdn.libravatar.org/avatar/7eafec293cdc84ccc79910e3192915e78e6e34e812c9116c61cc64bf13dc271a?s=24&d=retro", "openid": "jpopelka.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "communishift"}, {"name": "gitpysmbc"}, {"name": "ipausers"}, {"name": "gitfirewalld-recode"}, {"name": "signed_fpca"}, {"name": "gitsystem-config-network"}, {"name": "git-packit-team"}, {"name": "fedora-contributor"}, {"name": "fedorabugs"}, {"name": "gitpython-iwlib"}, {"name": "gitsystem-config-printer"}, {"name": "gitdhcpv6"}, {"name": "gitpycups"}, {"name": "gitfirewalld"}, {"name": "fedora-ci-admins"}, {"name": "atomic-ci"}]}}, {"karma": 1, "karma_critpath": 0, "text": "no problems spotted", "timestamp": "2016-05-26 07:36:48", "update_id": 58755, "user_id": 214, "id": 438225, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "akurtakov", "email": "akurtako@redhat.com", "id": 214, "avatar": "https://seccdn.libravatar.org/avatar/e38ad21fbf510f23831a9832e3a3a78108811d93736988a0d2d39d7c21074b94?s=24&d=retro", "openid": "akurtakov.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "eclipse-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted by [docker-1.10.3-11.git8ecd47f.fc24](https://bodhi.fedoraproject.org/updates/FEDORA-2016-e21eeb4202).", "timestamp": "2016-05-26 17:43:54", "update_id": 58755, "user_id": 91, "id": 438555, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "docker-1.10.3-10.git8ecd47f.fc24", "signed": true, "release_id": 14, "type": "rpm", "epoch": 2}], "bugs": [{"bug_id": 1329454, "title": "CVE-2016-3697 docker: privilege escalation via confusion of usernames and UIDs [fedora-all]", "security": true, "parent": false, "feedback": [{"karma": 0, "comment_id": 437566, "bug_id": 1329454, "comment": {"karma": 1, "karma_critpath": 0, "text": "I installed the referenced package and spun up a Kubernetes cluster to verify it functioned as expected.  I can confirm that this package worked properly.", "timestamp": "2016-05-24 15:41:52", "update_id": 58758, "user_id": 2165, "id": 437566, "testcase_feedback": [], "user": {"name": "derekwaynecarr", "email": "derekwaynecarr@gmail.com", "id": 2165, "avatar": "https://seccdn.libravatar.org/avatar/91f4727794c7f474f8489ae9b1b5c80f9bdd5e26c072be3b50dc2d220a2bb0ef?s=24&d=retro", "openid": "derekwaynecarr.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 437583, "bug_id": 1329454, "comment": {"karma": -1, "karma_critpath": 0, "text": "The package is not using the systemd cgroup driver by default.\n\nThis causes unexpected behaviors on upgrades from previous iterations of docker on fedora.", "timestamp": "2016-05-24 16:15:50", "update_id": 58758, "user_id": 2165, "id": 437583, "testcase_feedback": [], "user": {"name": "derekwaynecarr", "email": "derekwaynecarr@gmail.com", "id": 2165, "avatar": "https://seccdn.libravatar.org/avatar/91f4727794c7f474f8489ae9b1b5c80f9bdd5e26c072be3b50dc2d220a2bb0ef?s=24&d=retro", "openid": "derekwaynecarr.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 437986, "bug_id": 1329454, "comment": {"karma": -1, "karma_critpath": 0, "text": "The package is not using the systemd cgroup driver by default.\n\nThis causes unexpected behaviors on upgrades from previous iterations of docker on fedora.", "timestamp": "2016-05-25 20:05:02", "update_id": 59043, "user_id": 2165, "id": 437986, "testcase_feedback": [], "user": {"name": "derekwaynecarr", "email": "derekwaynecarr@gmail.com", "id": 2165, "avatar": "https://seccdn.libravatar.org/avatar/91f4727794c7f474f8489ae9b1b5c80f9bdd5e26c072be3b50dc2d220a2bb0ef?s=24&d=retro", "openid": "derekwaynecarr.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 438424, "bug_id": 1329454, "comment": {"karma": 0, "karma_critpath": 0, "text": "Derek, Is there a bug for that problem? ", "timestamp": "2016-05-26 12:25:50", "update_id": 59043, "user_id": 659, "id": 438424, "testcase_feedback": [], "user": {"name": "dustymabe", "email": "dusty@dustymabe.com", "id": 659, "avatar": "https://seccdn.libravatar.org/avatar/9ec855a28fe61a7fe3d6788882c87ee4c95b38da423234fbb70673a977552c4c?s=24&d=retro", "openid": "dustymabe.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "sysadmin-badges"}, {"name": "aws"}, {"name": "qa-beaker-user"}, {"name": "gitfedora-web"}, {"name": "centosproject-email-aliases"}, {"name": "fi-apprentice"}, {"name": "sysadmin-veteran"}, {"name": "web"}, {"name": "sig-paas"}, {"name": "atomic-wg"}, {"name": "qa"}, {"name": "fedorabugs"}, {"name": "msftazure"}, {"name": "pungi-devel"}, {"name": "qa-automation-shell"}, {"name": "sysadmin-fedimg"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "coreos"}, {"name": "sysadmin"}, {"name": "communishift"}, {"name": "aws-fcos-mgmt"}, {"name": "sysadmin-bodhi"}, {"name": "sysadmin-releng"}, {"name": "sysadmin-coreos"}, {"name": "ipausers"}, {"name": "ibmcloud"}, {"name": "discussion-mods-project"}, {"name": "discussion-mods-ask"}, {"name": "hetznercloud"}, {"name": "coreos-sig"}]}}}, {"karma": 0, "comment_id": 439385, "bug_id": 1329454, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me for 1326110 when testing atomicapp ", "timestamp": "2016-05-28 14:42:58", "update_id": 59200, "user_id": 659, "id": 439385, "testcase_feedback": [], "user": {"name": "dustymabe", "email": "dusty@dustymabe.com", "id": 659, "avatar": "https://seccdn.libravatar.org/avatar/9ec855a28fe61a7fe3d6788882c87ee4c95b38da423234fbb70673a977552c4c?s=24&d=retro", "openid": "dustymabe.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "sysadmin-badges"}, {"name": "aws"}, {"name": "qa-beaker-user"}, {"name": "gitfedora-web"}, {"name": "centosproject-email-aliases"}, {"name": "fi-apprentice"}, {"name": "sysadmin-veteran"}, {"name": "web"}, {"name": "sig-paas"}, {"name": "atomic-wg"}, {"name": "qa"}, {"name": "fedorabugs"}, {"name": "msftazure"}, {"name": "pungi-devel"}, {"name": "qa-automation-shell"}, {"name": "sysadmin-fedimg"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "coreos"}, {"name": "sysadmin"}, {"name": "communishift"}, {"name": "aws-fcos-mgmt"}, {"name": "sysadmin-bodhi"}, {"name": "sysadmin-releng"}, {"name": "sysadmin-coreos"}, {"name": "ipausers"}, {"name": "ibmcloud"}, {"name": "discussion-mods-project"}, {"name": "discussion-mods-ask"}, {"name": "hetznercloud"}, {"name": "coreos-sig"}]}}}, {"karma": 0, "comment_id": 440655, "bug_id": 1329454, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2016-05-31 10:53:31", "update_id": 59432, "user_id": 2838, "id": 440655, "testcase_feedback": [], "user": {"name": "buvaneshkumar", "email": "linuxsbk@gmail.com", "id": 2838, "avatar": "https://seccdn.libravatar.org/avatar/9d4985d61d4ff1d49ab11bfb4c5eccb42c0d88a833814c4b914f0aa4f8f51938?s=24&d=retro", "openid": "buvaneshkumar.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 440661, "bug_id": 1329454, "comment": {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2016-05-31 11:06:49", "update_id": 59431, "user_id": 2838, "id": 440661, "testcase_feedback": [], "user": {"name": "buvaneshkumar", "email": "linuxsbk@gmail.com", "id": 2838, "avatar": "https://seccdn.libravatar.org/avatar/9d4985d61d4ff1d49ab11bfb4c5eccb42c0d88a833814c4b914f0aa4f8f51938?s=24&d=retro", "openid": "buvaneshkumar.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 440885, "bug_id": 1329454, "comment": {"karma": 1, "karma_critpath": 0, "text": "This works with kube 1.3 head testing against docker 1.10 and everything is configured as expected.", "timestamp": "2016-05-31 21:46:16", "update_id": 59200, "user_id": 2165, "id": 440885, "testcase_feedback": [], "user": {"name": "derekwaynecarr", "email": "derekwaynecarr@gmail.com", "id": 2165, "avatar": "https://seccdn.libravatar.org/avatar/91f4727794c7f474f8489ae9b1b5c80f9bdd5e26c072be3b50dc2d220a2bb0ef?s=24&d=retro", "openid": "derekwaynecarr.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 440886, "bug_id": 1329454, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me with kube 1.3 nodes against docker 1.10", "timestamp": "2016-05-31 21:48:31", "update_id": 59431, "user_id": 2165, "id": 440886, "testcase_feedback": [], "user": {"name": "derekwaynecarr", "email": "derekwaynecarr@gmail.com", "id": 2165, "avatar": "https://seccdn.libravatar.org/avatar/91f4727794c7f474f8489ae9b1b5c80f9bdd5e26c072be3b50dc2d220a2bb0ef?s=24&d=retro", "openid": "derekwaynecarr.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 440895, "bug_id": 1329454, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2016-05-31 22:43:00", "update_id": 59431, "user_id": 1265, "id": 440895, "testcase_feedback": [], "user": {"name": "eparis", "email": "eparis@redhat.com", "id": 1265, "avatar": "https://seccdn.libravatar.org/avatar/832167af25dc474a82af9438fe683cee93f8182d41541a0aa3ef4b4649e4a75a?s=24&d=retro", "openid": "eparis.id.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 443099, "bug_id": 1329454, "comment": {"karma": 1, "karma_critpath": 0, "text": "I tested this with a Kubernetes 1.3 cluster and verified it was functional.", "timestamp": "2016-06-06 17:29:12", "update_id": 59593, "user_id": 2165, "id": 443099, "testcase_feedback": [], "user": {"name": "derekwaynecarr", "email": "derekwaynecarr@gmail.com", "id": 2165, "avatar": "https://seccdn.libravatar.org/avatar/91f4727794c7f474f8489ae9b1b5c80f9bdd5e26c072be3b50dc2d220a2bb0ef?s=24&d=retro", "openid": "derekwaynecarr.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 444109, "bug_id": 1329454, "comment": {"karma": -1, "karma_critpath": 0, "text": "Installed on a vanilla F23 box and did not edit any unit files, and get following error:\n\nsudo systemctl status docker\n\u25cf docker.service - Docker Application Container Engine\n   Loaded: loaded (/etc/systemd/system/docker.service; disabled; vendor preset: disabled)\n   Active: failed (Result: exit-code) since Wed 2016-06-08 15:58:16 EDT; 7s ago\n     Docs: http://docs.docker.com\n  Process: 16020 ExecStart=/usr/bin/docker -d $OPTIONS $DOCKER_STORAGE_OPTIONS $DOCKER_NETWORK_OPTIONS $INSECURE_REGISTRY (code=exited, status=125)\n Main PID: 16020 (code=exited, status=125)\n\nJun 08 15:58:16 localhost.localdomain systemd[1]: Started Docker Application Container Engine.\nJun 08 15:58:16 localhost.localdomain systemd[1]: Starting Docker Application Container Engine...\nJun 08 15:58:16 localhost.localdomain docker[16020]: flag provided but not defined: -d\nJun 08 15:58:16 localhost.localdomain docker[16020]: See '/usr/bin/docker --help'.\nJun 08 15:58:16 localhost.localdomain systemd[1]: docker.service: Main process exited, code=exited, status=125/n/a\nJun 08 15:58:16 localhost.localdomain systemd[1]: docker.service: Unit entered failed state.\nJun 08 15:58:16 localhost.localdomain systemd[1]: docker.service: Failed with result 'exit-code'.\n\nit looks like the unit should have docker daemon \\ and not docker -d \\", "timestamp": "2016-06-08 20:05:40", "update_id": 59593, "user_id": 2165, "id": 444109, "testcase_feedback": [], "user": {"name": "derekwaynecarr", "email": "derekwaynecarr@gmail.com", "id": 2165, "avatar": "https://seccdn.libravatar.org/avatar/91f4727794c7f474f8489ae9b1b5c80f9bdd5e26c072be3b50dc2d220a2bb0ef?s=24&d=retro", "openid": "derekwaynecarr.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 444137, "bug_id": 1329454, "comment": {"karma": 0, "karma_critpath": 0, "text": "derek - that unit file with \"/usr/bin/docker -d\" is not in the fedora dist-git at all - I'm not sure how you're getting it on a fresh fedora f23 installation - there's not even forward-journald in there (it's just wrong)\nThis is the current unit shipped with this update:\n\n\n```\n[Unit]\nDescription=Docker Application Container Engine\nDocumentation=http://docs.docker.com\nAfter=network.target\nWants=docker-storage-setup.service\n\n[Service]\nType=notify\nNotifyAccess=all\nEnvironmentFile=-/etc/sysconfig/docker\nEnvironmentFile=-/etc/sysconfig/docker-storage\nEnvironmentFile=-/etc/sysconfig/docker-network\nEnvironment=GOTRACEBACK=crash\nExecStart=/bin/sh -c '/usr/bin/docker daemon \\\n          --exec-opt native.cgroupdriver=systemd \\\n          $OPTIONS \\\n          $DOCKER_STORAGE_OPTIONS \\\n          $DOCKER_NETWORK_OPTIONS \\\n          $INSECURE_REGISTRY \\\n          2>&1 | /usr/bin/forward-journald -tag docker'\nExecReload=/bin/kill -s HUP $MAINPID\nLimitNOFILE=1048576\nLimitNPROC=1048576\nLimitCORE=infinity\nMountFlags=slave\nStandardOutput=null\nStandardError=null\nTimeoutStartSec=0\nRestart=on-abnormal\n\n[Install]\nWantedBy=multi-user.target\n```", "timestamp": "2016-06-08 21:33:07", "update_id": 59593, "user_id": 2468, "id": 444137, "testcase_feedback": [], "user": {"name": "runcom", "email": "amurdaca@redhat.com", "id": 2468, "avatar": "https://seccdn.libravatar.org/avatar/3d724e4084e6202a0ecec93274be9a35984f6aa4df6df50a2aafb348da4b948e?s=24&d=retro", "openid": "runcom.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "iot"}]}}}, {"karma": 0, "comment_id": 444138, "bug_id": 1329454, "comment": {"karma": 1, "karma_critpath": 0, "text": "Apologies, user error on my part.", "timestamp": "2016-06-08 21:38:54", "update_id": 59593, "user_id": 2165, "id": 444138, "testcase_feedback": [], "user": {"name": "derekwaynecarr", "email": "derekwaynecarr@gmail.com", "id": 2165, "avatar": "https://seccdn.libravatar.org/avatar/91f4727794c7f474f8489ae9b1b5c80f9bdd5e26c072be3b50dc2d220a2bb0ef?s=24&d=retro", "openid": "derekwaynecarr.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 444205, "bug_id": 1329454, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2016-06-09 04:20:28", "update_id": 59593, "user_id": 228, "id": 444205, "testcase_feedback": [], "user": {"name": "lsm5", "email": "lsm5@redhat.com", "id": 228, "avatar": "https://seccdn.libravatar.org/avatar/05bd0d0810e225c716eba3290a5596c557d1ea3e4e2b0cf0de8e62a925927b5c?s=24&d=retro", "openid": "lsm5.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "container-sig"}]}}}]}], "updateid": "FEDORA-2016-5f73992af7", "karma": 2, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}